Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
File: CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft (raw, json)
Hash identifier: ru5ZDDxN/yX7EBcBqKiF1UYqtYs8GJnkx4Tnv2L07zg=
Subject key identifier: BF:F5:3C:24:C4:D8:64:1B:F4:F1:28:03:81:86:B8:70:91:28:91:3D
Authority key identifier: CC:A1:E6:73:6D:B5:34:7C:DA:8F:22:4F:0C:85:72:9C:50:FD:09:1C
Certificate issuer: /CN=cca1e6736db5347cda8f224f0c85729c50fd091c
Certificate serial: 73077F1ACE9EB1AD9E3A25EF225E147C93DBC894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKHmc221NHzajyJPDIVynFD9CRw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
Manifest number: 012B
Signing time: Wed 25 Mar 2026 18:14:18 +0000
Manifest this update: Wed 25 Mar 2026 18:09:18 +0000
Manifest next update: Thu 26 Mar 2026 21:02:18 +0000
Files and hashes: 1: CCA1E6736DB5347CDA8F224F0C85729C50FD091C.crl (hash: LRCniJm7uxcaI5slrrkVgKjV8DX7hFmfPxYloUoXfL4=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.crl
rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
rsync://rpki.ripe.net/repository/DEFAULT/zKHmc221NHzajyJPDIVynFD9CRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:07:7f:1a:ce:9e:b1:ad:9e:3a:25:ef:22:5e:14:7c:93:db:c8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cca1e6736db5347cda8f224f0c85729c50fd091c
Validity
Not Before: Mar 25 18:09:18 2026 GMT
Not After : Mar 26 21:02:18 2026 GMT
Subject: CN=BFF53C24C4D8641BF4F128038186B8709128913D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:45:30:c0:3d:c5:ce:ed:a2:81:cd:ad:e9:b4:
6c:63:d1:68:8f:09:52:62:8c:1b:29:4d:b1:ca:2a:
3f:3a:d4:fa:95:35:85:a2:c8:ae:0c:b9:75:06:5b:
c8:4a:15:7a:a3:f3:bf:f2:40:04:98:9a:e9:66:d5:
59:42:cd:e0:a8:a0:07:95:0e:65:1e:1f:69:a4:ca:
37:09:3b:8a:6d:bb:ae:81:62:11:b8:83:46:dc:1c:
14:d3:df:8e:15:b7:c1:20:8e:67:89:4f:2c:15:6b:
4c:a7:b2:82:ae:6b:0e:78:86:02:19:34:24:04:5b:
6a:05:4c:8d:18:1a:b9:ff:f6:81:09:3d:1a:14:88:
d1:dc:b6:d4:a4:4b:c1:df:70:16:a2:8b:bf:5f:37:
f1:09:ec:06:1e:95:d9:af:a7:bc:fe:77:aa:42:a8:
0a:b8:ec:57:4b:f2:fc:c6:3c:c1:57:4a:64:d1:a4:
a1:9e:30:c5:7f:77:28:e5:6f:8a:03:fa:5b:72:19:
fe:28:e0:bb:18:d6:22:e2:4e:16:a1:82:40:d4:17:
0a:6d:35:71:5c:57:04:2b:9f:84:79:60:91:7f:25:
0b:4b:bf:f6:01:bc:d0:85:79:1d:ab:4f:d8:7f:c7:
78:3a:77:90:de:7d:6b:e7:e9:34:89:7a:3e:f9:01:
3a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F5:3C:24:C4:D8:64:1B:F4:F1:28:03:81:86:B8:70:91:28:91:3D
X509v3 Authority Key Identifier:
keyid:CC:A1:E6:73:6D:B5:34:7C:DA:8F:22:4F:0C:85:72:9C:50:FD:09:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKHmc221NHzajyJPDIVynFD9CRw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5836e60-6a92-47ef-9b9b-92a84d6d35ba/0/CCA1E6736DB5347CDA8F224F0C85729C50FD091C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:fb:8b:12:52:07:27:34:20:0b:6c:96:de:8f:42:55:d5:bb:
73:2a:e6:48:db:25:19:b3:01:06:d0:fa:cc:29:56:07:91:08:
cf:fe:12:ff:8f:e2:f0:ec:dd:c3:5b:10:be:7d:e1:9c:c2:f4:
49:84:2c:c9:0e:07:3c:8a:15:92:0e:aa:88:6b:b3:70:85:0d:
ba:0d:f6:80:96:c2:56:0a:03:fe:5d:6a:48:42:dc:19:60:21:
15:ce:a9:de:c7:2b:01:5c:78:ea:b5:8d:4f:58:29:b5:d1:dd:
59:16:19:b9:63:4a:89:e5:a3:5b:ba:37:82:4a:10:78:e8:b0:
e3:21:5a:2a:97:85:21:c9:a3:1c:3d:88:c3:0c:65:55:79:24:
0c:ad:66:85:c9:7d:bf:f4:79:08:6c:86:f7:44:61:70:07:f8:
23:c4:62:47:98:5b:b1:7f:65:a1:92:6e:2c:4a:b0:b7:e9:5b:
78:12:b1:40:71:bc:85:6e:69:e4:a3:67:28:5b:74:2a:66:79:
88:d4:e2:17:84:e9:d8:ab:dd:2f:a3:28:aa:f5:e5:95:b1:45:
dc:8f:ca:88:8d:b9:1e:84:c1:08:68:a2:b0:89:2d:94:87:34:
33:1b:20:e7:a7:5d:03:d4:55:45:f2:e7:46:46:dd:78:f8:7e:
34:52:c8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:04 2026 by rpki-client